NONE · 0

CVE-2026-67365

Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 - Unauthenticated SQL injection in mod_icagenda_calendar (iCagenda), reachable via com_ajax with no session, ...

Vulnerability Description

Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 - Unauthenticated SQL injection in mod_icagenda_calendar (iCagenda), reachable via com_ajax with no session, token or account.

Related Weaknesses (CWE)

References

FAQ

What is CVE-2026-67365?

CVE-2026-67365 is a documented vulnerability. Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 - Unauthenticated SQL injection in mod_icagenda_calendar (iCagenda), reachable via com_ajax with no session, ...

How severe is CVE-2026-67365?

CVSS scoring is not yet available for CVE-2026-67365. Check NVD for updates.

Is there a patch for CVE-2026-67365?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.